Amazon WorkSpaces supports certificate-based authentication on Web Access

Amazon WorkSpaces now supports certificate-based authentication with Windows WorkSpaces on WorkSpaces Streaming Protocol (WSP) bundles using WorkSpaces Web Access.

Users now can authenticate seamlessly to WorkSpaces desktops using single sign-on (SSO) features of their SAML 2.0 identity provider right from their browser without having to install a native client application. Organizations with users who prefer a web browser experience will also get the benefit of certificate-based authentication. With certificate-based authentication, organizations can rely more on the authentication features of their SAML 2.0 identity provider to provide access to work resources, such as passwordless authentication.

WorkSpaces certificate-based authentication on Web Access is now available in US East (N. Virginia), US West (Oregon), Canada (Central), Europe (Frankfurt, Ireland, London), Asia Pacific (Mumbai, Seoul, Singapore, Sydney, and Tokyo), and South America (São Paulo), South Africa (Cape Town), Israel (Tel Aviv), and the AWS GovCloud (US-West, US-East) Regions.

There are no additional WorkSpaces charges for using certificate-based authentication with Web Access. AWS Private CA offers separate pricing for short-lived certificate use cases, which can help lower the monthly cost of the CA and the price per certificate. See AWS Private CA Pricing for more information. For more information about certificate-based authentication, see or documentation.